The opinion in support of the decision being entered today was not written 
for publication and is not binding precedent of the Board. 
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DECISION ON APPEAL 



This is a decision on the appeal from the final rejection of 
claims 1-57, which are all of the claims in this application. 
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The claimed invention relates to the establishment and 
enforcement of password change policy in a single sign-on (SSO) 
environment. A first single sign-on password is changed to create 
a second single sign-on password in response to the receipt of a 
password change instruction. A target password is retrieved and 
modified to create a modified target password in a user selected 
manner to match the second single sign-on password. In response to 
a user request for access to an application, the modified target 
password is retrieved from storage and provided to the requested 
application. 

Claim 1 is illustrative of the invention and reads as 
follows : 

1. A method in a data processing system for changing a 
plurality of target passwords in a single sign-on environment, 
comprising the steps of: 

in response to receiving a change instruction identifying a 
first single sign-on password, changing the first single sign-on 
password to create a second single sign-on password; 

retrieving a target password; and 

modifying the target password in a user selected manner to 
match the second single sign-on password to create a modified 
target password. 
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The Examiner relies on the following prior art: 



Praf ullchandra 

Redpath 

He 



5,734,718 
5,854,629 
5,944,824 



Mar. 31, 1998 
Dec. 29, 1998 
Aug. 31, 1999 



Claims 1-14, 20-33, and 39-52 stand finally rejected under 
35 U.S.C. § 102(b) as being anticipated by He. Claims 15-19, 34- 
38, and 53-57 stand finally rejected under 35 U.S.C. § 103(a). As 
evidence of obviousness, the Examiner offers He in view of Redpath 
with respect to claims 15, 34, and 53, and He in view of 
Prafullchandra with respect to claims 16-19, 35-38, and 54-57. 

Rather than reiterate the arguments of Appellants and the 
Examiner, reference is made to the Briefs^ and Answer for their 
respective details . 



We have carefully considered the subject matter on appeal, the 
rejections advanced by the Examiner, and the evidence of 
anticipation and obviousness relied upon by the Examiner as support 
for the rejections. We have, likewise, reviewed and taken into 



^ The Appeal Brief was filed May 24, 2005. In response to the Examiner's 
Answer mailed July 13, 2005, a Reply Brief was filed September 13, 2005 which 
was acknowledged and entered by the Examiner as indicated in the communication 
mailed October 25, 2005. 
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consideration, in reaching our decision. Appellants' arguments set 
forth in the Briefs along with the Examiner's rationale in support 
of the rejections and arguments in rebuttal set forth in the 
Examiner's Answer. 

It is our view, after consideration of the record before us, 
that the He reference does not fully meet the invention as set 
forth in claims 1-14, 20-33, and 39-52. With respect to the 
Examiner's 35 U.S.C. § 103(a) rejection, we are also of the view 
that the evidence relied upon and the level of skill in the 
particular art would not have suggested to one of ordinary skill in 
the art the invention as recited in claims 15-19, 34-38, and 53-57. 
Accordingly, we reverse. 

We consider first the rejection of claims 1-14, 20-33, and 39- 
52 under 35 U.S.C. § 102(b) as being anticipated by He. 
Anticipation is established only when a single prior art reference 
discloses, expressly or under the principles of inherency, each and 
every element of a claimed invention as well as disclosing 
structure which is capable of performing the recited functional 
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limitations. RCA Corp. v. Applied Digital Data Systems, Inc ., 730 
F.2d 1440, 1444, 221 USPQ 385, 388 (Fed. Cir.); cert, dismissed , 
468 U.S. 1228 (1984); W.L. Gore and Associates, Inc. v. Garlock , 
Inc., 721 F.2d 1540, 1554, 220 USPQ 303, 313 (Fed. Cir. 1983), 
cert, denied , 469 U.S. 851 (1984) 

With respect to the appealed independent claims 1, 20, and 39, 
the Examiner attempts to read the various limitations on the 
disclosure of He. In particular, the Examiner (Answer, page 3) 
points to various portions of column 13 of He which is a 
description of the illustration in Figure 10 of He. 

Appellants' arguments in response assert that the Examiner has 
not shown how each of the claimed features are present in the 
disclosure of He so as to establish a case of anticipation. 
Appellants' arguments (Brief, pages 12-16; Reply Brief, pages 2-4) 
primarily focus on the contention that, in contrast to the claimed 
invention, He does not provide a disclosure of changing a single 
sign-on password to create a second single sign-on password. 

After reviewing the He reference in light of the arguments of 
record, we are in general agreement with Appellants' position as 
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stated in the Briefs. The Examiner has primarily relied upon the 
disclosure in column 13 of He which describes the initialization of 
single sign-on (SSO) capability for a user, the initialization task 
being performed by a super user. While it is indisputable that a 
password is being changed during this process, we find no support 
in this section, or elsewhere, in He for the Examiner's assertion 
that the password being changed is a single sign-on password. As 
such, it is our view that the Examiner's argument (Answer, page 11) 
that, since the super user in He has SSO capability, it must follow 
that the initialization process disclosed in column 13 of He must 
involve an SSO password change can only be based on unwarranted 
speculation. It is further our view that even assuming, arguendo, 
that the password being changed in He is a first single sign-on 
password, there is no disclosure that this password change involves 
the creation of a second single sign-on password, a feature present 
in each of the independent claims on appeal. 

In view of the above discussion, since all of the claim 
limitations are not present in the disclosure of He, we do not 
sustain the Examiner's 35 U.S.C. § 102(b) rejection of independent 
claims 1, 20, and 39, nor of claims 2-14, 21-33, and 40-52 
dependent thereon . 
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Turning to a consideration of the Examiner's 35 U.S.C. 
§ 103(a) rejection of dependent claims 15-19, 34-38, and 53-57 
based on separate combinations of He with Redpath and 
Praf ullchandra, we do not sustain this rejection as well. The 
Redpath and Praf ullchandra references have been added to He by the 
Examiner to address, respectively, the graphical user interface and 
target password change policy features set forth in the rejected 
dependent claims. We find nothing, however, in the disclosures 
Redpath or Praf ullchandra which would overcome the innate 
deficiencies of He discussed supra. 
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In summary, we have not sustained either of the Examiner' s 
rejections of the claims on appeal. Therefore, the decision of the 
Examiner rejecting claims 1-57 is reversed. 



REVERSED 




LEE E. BARRETT 
Administrative Patent Judge 
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